pen testing
A penetration test, occasionally called a pentest, is a method of evaluating the security of a computer
system or network by simulating an attack from malicious outsiders (who
do not have an authorised means of accessing the organisation's
systems) and malicious insiders (who have some level of authorised
access). The process involves an active analysis of the system for any
potential vulnerabilities that could result from poor or improper system
configuration, both known and unknown hardware or software flaws, or
operational weaknesses in process or technical countermeasures. This
analysis is carried out from the position of a potential attacker and
can involve active exploitation of security vulnerabilities.Security issues uncovered through the penetration test are presented to
the system's owner. Effective penetration tests will couple this
information with an accurate assessment of the potential impacts to the
organization and outline a range of technical and procedural
countermeasures to reduce risks.
No comments:
Post a Comment